Principal Systems Security Engineer

Viasat; Carlsbad (CA); On-site; USD 249,000 - 373,000; Full time

Job summary

Viasat is seeking a Principal Systems Security Engineer to lead and shape security architecture across enterprise, cloud, product, and infrastructure. The role focuses on IA and DoD RMF compliance, coordinating with ground and space networks and multiple security domains.

You will guide architecture reviews, run threat modeling, and implement a comprehensive security program aligned with NIST and industry standards, including Zero Trust implementations.

Qualifications

• Bachelor's or Master's degree in Computer Science, Engineering, Information Security, or related field, or equivalent practical experience.
• 12+ years of experience leading complex security engineering and architecture initiatives.
• Strong understanding of security architecture principles and defense-in-depth strategies.
• Experience designing and implementing security controls in enterprise-scale environments.
• Hands-on experience securing cloud platforms such as Microsoft Azure, AWS, or Google Cloud Platform.
• Experience using SPRS and eMASS platforms.
• Experience with identity and access management, authentication, authorization, and privileged access controls.
• Knowledge of network security, endpoint security, vulnerability management, and infrastructure security standard processes.
• Experience conducting threat modeling, security assessments, and architecture reviews.
• Proficiency with scripting and automation using PowerShell, Python, Bash, or similar languages.

Responsibilities

• Collaborate with multi-functional teams to develop, build, and/or implement secure architectures for ground and space networks.
• Lead security reviews for new systems, infrastructure, applications, and technology initiatives.
• Conduct threat modeling, architecture assessments, and security risk evaluations.
• Create and lead an information security program specific to the constructed architecture.
• Provide technical and policy guidance that will enable successful RMF security accreditation efforts.
• Implement the DoD Zero Trust framework within target programs.
• Develop and maintain security standards, reference architectures, and engineering standard processes.
• Communicate security risks, recommendations, and architectural decisions to technical and business partners.

Skills

Security architecture

Security engineering leadership

Cloud security

Threat modeling

RMF/DoD accreditation

Scripting (PowerShell/Python/Bash)

Communication

Security risk management

Security governance

Education

Bachelor's or Master's in CS/Engineering/Info Security

Tools

SPR S

eMASS

Azure

AWS

GCP

Job description

About us

One team. Global challenges. Infinite opportunities. At Viasat, we're on a mission to deliver connections with the capacity to change the world. For more than 35 years, Viasat has helped shape how consumers, businesses, governments and militaries around the globe communicate. We're looking for people who think big, act fearlessly, and create an inclusive environment that drives positive impact to join our team.

What you'll do

We are seeking a highly motivated Principal Systems Security Engineer to join our Systems Security Engineering organization. Responsibilities for this role include architecting, implementing, and advancing security controls across enterprise, cloud, product, and infrastructure environments. The ideal candidate will have a background in Information Assurance (IA) and Cybersecurity frameworks, and combines deep technical expertise with strong systems thinking, enabling them to identify security risks, design scalable security solutions, and influence engineering teams across the organization.

The day-to-day

This role is heavily focused on IA and security architecture, providing guidance across network, software, infrastructure, cloud, and physical security teams to ensure compliance with current and future NIST guidelines.

• Collaborate with multi-functional teams to develop, build, and/or implement secure architectures for ground and space networks.
• Lead security reviews for new systems, infrastructure, applications, and technology initiatives.
• Conduct threat modeling, architecture assessments, and security risk evaluations
• Create and lead an information security program specific to the constructed architecture.
• Provide technical and policy guidance that will enable successful RMF security accreditation efforts.
• Implement the DoD Zero Trust framework within target programs.
• Develop and maintain security standards, reference architectures, and engineering standard processes.
• Communicate security risks, recommendations, and architectural decisions to technical and business partners.

What you'll need

• Bachelor's or Master's degree in Computer Science, Engineering, Information Security, or related field, or equivalent practical experience.
• 12+ years of experience leading complex security engineering and architecture initiatives.
• Strong understanding of security architecture principles and defense-in-depth strategies.
• Experience designing and implementing security controls in enterprise-scale environments.
• Hands-on experience securing cloud platforms such as Microsoft Azure, AWS, or Google Cloud Platform.
• Experience usign SPRS and eMASS platforms.
• Experience with identity and access management, authentication, authorization, and privileged access controls.
• Knowledge of network security, endpoint security, vulnerability management, and infrastructure security standard processes.
• Experience conducting threat modeling, security assessments, and architecture reviews.
• Proficiency with scripting and automation using PowerShell, Python, Bash, or similar languages.
• Strong problem-solving, analytical, and troubleshooting skills.
• Excellent interpersonal skills with the ability to influence technical and non-technical partners.
• Ability to travel up to 20%. This role will require travel to our offices in Carlsbad, CA and Reston, VA.
• U.S. Citizenship required.
• Must have an active Top Secret Clearance.

What will help you on the job

• CISSP, CCSP, GIAC, Azure Security Engineer, AWS Security Specialty, or similar industry certifications.
• Experience implementing Zero Trust architectures and modern identity security strategies.
• Knowledge of cloud-native technologies, containers, Kubernetes, and platform engineering practices.
• Experience with SIEM, SOAR, XDR, and security monitoring platforms.
• Experience working within regulated environments and security frameworks such as NIST, CIS Controls, ISO 27001, SOC 2, PCI DSS, or FedRAMP.
• Extensive familiarity with security automation and DevSecOps methodologies.
• Ability to influence technical direction across teams without direct authority.
• Experience presenting security architecture recommendations to senior leaders and executive partners.
• Experience with MBSE.
• Proven ability to balance security risk reduction with business and operational objectives.
• The ability to manage competing priorities and timelines.
• Strong communication skills, both written and verbal.
• Strong self-motivation and independent work ethic.

#LI-AF1

Salary range

$200,000.00 - $315,500.00 / annually.
For specific work locations within San Jose, the San Francisco Bay area and New York City metropolitan area, the base pay range for this role is $248,500.00- $372,500.00/ annually

At Viasat, we consider many factors when it comes to compensation, including the scope of the position as well as your background and experience. Base pay may vary depending on job-related knowledge, skills, and experience. Additional cash or stock incentives may be provided as part of the compensation package, in addition to a range of medical, financial, and/or other benefits, dependent on the position offered. Learn more about Viasat's comprehensive benefit offerings that are focused on your holistic health and wellness at https://careers.viasat.com/benefits.

EEO Statement

Viasat is proud to be an equal opportunity employer, seeking to create a welcoming and diverse environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, ancestry, physical or mental disability, medical condition, marital status, genetics, age, or veteran status or any other applicable legally protected status or characteristic. If you would like to request an accommodation on the basis of disability for completing this on-line application, please click here.